Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: AKl/hqyv9uYTZyCzqF3XAqmOTXc0TcE3AJf/qLDCRus=
Subject key identifier: E0:8B:12:29:AD:65:B4:99:F4:C2:D4:D8:80:7A:EF:B6:78:DE:3E:B3
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019CEDB918724810F4B110603FEDCA71BDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 13C4
Signing time: Sat 14 Mar 2026 19:00:56 +0000
Manifest this update: Sat 14 Mar 2026 19:00:56 +0000
Manifest next update: Sun 15 Mar 2026 19:00:56 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: L9a53mCdmVHrcwA63j9zgSEEeGwdogyKYWgXbWBgsNw=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:b9:18:72:48:10:f4:b1:10:60:3f:ed:ca:71:bd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Mar 14 19:00:56 2026 GMT
Not After : Mar 15 19:00:56 2026 GMT
Subject: CN=e08b1229ad65b499f4c2d4d8807aefb678de3eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:8d:94:15:83:0f:84:ef:2a:a4:0e:0c:19:
35:67:d8:f7:99:99:19:41:07:a7:51:98:72:5c:53:
a4:69:66:f5:9d:89:49:d7:f4:50:8b:9b:5e:ce:fe:
7a:ef:38:52:f8:df:e3:e4:77:68:6a:c5:04:ce:81:
a9:3c:e1:30:e2:80:90:2d:e9:3f:0f:cb:ad:a5:18:
b4:77:20:a4:7e:08:75:4a:01:56:bd:bc:1c:fb:6b:
eb:c7:db:ce:de:0b:06:57:64:4d:2c:4e:30:d0:18:
a3:30:f2:eb:3a:f3:76:57:fd:e1:d2:8b:98:b9:7e:
93:d8:71:5f:c0:99:07:6d:30:0f:42:a6:e2:bb:72:
b5:3f:cf:c0:ab:f2:70:b4:5c:c8:23:b9:22:03:33:
98:23:99:f9:46:97:98:4a:7f:d8:0b:13:2a:73:5a:
6f:cc:f8:59:1f:3f:2f:55:74:c0:5f:9f:aa:9d:54:
a4:e9:4e:cf:df:f0:66:72:08:ef:fd:3a:d0:a4:16:
c9:97:5b:3e:7c:c4:e4:28:91:57:d2:70:ba:73:bc:
98:b4:e2:0d:4c:b8:5a:44:f0:e8:66:e2:27:39:51:
73:9e:4b:b9:5b:d8:fa:ce:eb:fc:e3:04:c0:ac:60:
fc:71:86:b6:77:49:42:bd:42:de:32:3b:c3:5a:d1:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:12:29:AD:65:B4:99:F4:C2:D4:D8:80:7A:EF:B6:78:DE:3E:B3
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:04:46:a8:6c:ca:ec:8e:5e:6d:2b:ed:dc:d9:29:81:1c:26:
14:2b:92:53:bd:c5:89:7e:c6:d2:95:67:a3:d2:32:d6:30:67:
2a:0b:be:1c:94:15:7e:4a:26:99:b2:73:f7:ae:1f:1c:08:95:
51:05:cb:62:20:78:57:c2:24:af:38:7f:75:1a:33:b1:d1:c8:
ae:ba:dc:d9:18:37:ab:8f:d8:6e:b4:33:29:23:c2:9d:86:0d:
fa:df:83:a5:82:33:a2:34:fa:89:d0:2e:cd:73:d7:40:82:21:
66:ec:47:bc:6b:1a:ce:e5:48:3e:f5:c6:f8:58:74:ea:01:98:
ea:3a:a0:03:fd:2a:b3:26:f3:ff:5e:51:cc:0a:9a:50:c6:d1:
38:43:05:db:3b:0f:f6:15:d5:4d:db:52:50:15:55:88:5a:a7:
a8:3d:ad:25:ec:24:26:1f:61:90:1c:df:47:5b:be:86:35:6c:
c1:6e:1a:48:07:82:86:6a:97:40:15:12:cb:e2:61:2d:32:77:
6f:69:d3:ec:10:ac:25:01:56:fb:5f:ca:bc:f6:c0:7f:1a:07:
d8:94:8e:2b:00:0b:df:7d:12:fc:5b:df:47:02:bb:7c:1e:b2:
f7:74:9c:fd:b9:f3:30:de:65:3a:e6:db:55:6b:b7:57:57:f7:
43:08:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:46:07 2026 by rpki-client